httpd-bugs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 33852] New: - apache with mutual authentication enabled crashes
Date Fri, 04 Mar 2005 20:59:18 GMT
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=33852>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=33852

           Summary: apache with mutual authentication enabled crashes
           Product: Apache httpd-2.0
           Version: 2.0.52
          Platform: PC
        OS/Version: Windows 2000
            Status: NEW
          Severity: major
          Priority: P2
         Component: All
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: vasudha.upadhyaya@convergys.com


using apache with mod_ssl (OpenSSL 0.9.7), mod_rewrite, mod_proxy as a
transparent proxy to convert HTTP to HTTPS, apache crashes under load when
SSLProxyVerify is set to "required". load is defined as 10 or more simultaneous
requests to the same VirtualHost.

--- httpd.conf ---

ServerRoot  "C:/Program Files/Apache Group/Apache2"
Timeout 600
KeepAlive On
MaxKeepAliveRequests 300
KeepAliveTimeout 15
Listen 80
NameVirtualHost *:80
PidFile logs/httpd.pid
ThreadsPerChild 72

LoadModule access_module modules/mod_access.so
#LoadModule actions_module modules/mod_actions.so
#LoadModule alias_module modules/mod_alias.so
LoadModule asis_module modules/mod_asis.so
LoadModule auth_module modules/mod_auth.so
#LoadModule auth_anon_module modules/mod_auth_anon.so
#LoadModule auth_dbm_module modules/mod_auth_dbm.so
#LoadModule auth_digest_module modules/mod_auth_digest.so
#LoadModule autoindex_module modules/mod_autoindex.so
#LoadModule cern_meta_module modules/mod_cern_meta.so
#LoadModule cgi_module modules/mod_cgi.so
#LoadModule dav_module modules/mod_dav.so
#LoadModule dav_fs_module modules/mod_dav_fs.so
LoadModule dir_module modules/mod_dir.so
LoadModule env_module modules/mod_env.so
#LoadModule expires_module modules/mod_expires.so
#LoadModule file_cache_module modules/mod_file_cache.so
#LoadModule headers_module modules/mod_headers.so
#LoadModule imap_module modules/mod_imap.so
LoadModule include_module modules/mod_include.so
LoadModule info_module modules/mod_info.so
#LoadModule isapi_module modules/mod_isapi.so
LoadModule log_config_module modules/mod_log_config.so
LoadModule mime_module modules/mod_mime.so
#LoadModule mime_magic_module modules/mod_mime_magic.so
LoadModule proxy_module modules/mod_proxy.so
LoadModule proxy_connect_module modules/mod_proxy_connect.so
LoadModule proxy_http_module modules/mod_proxy_http.so
LoadModule proxy_ftp_module modules/mod_proxy_ftp.so
LoadModule negotiation_module modules/mod_negotiation.so
LoadModule rewrite_module modules/mod_rewrite.so
LoadModule setenvif_module modules/mod_setenvif.so
#LoadModule speling_module modules/mod_speling.so
LoadModule status_module modules/mod_status.so
LoadModule unique_id_module modules/mod_unique_id.so
#LoadModule userdir_module modules/mod_userdir.so
#LoadModule usertrack_module modules/mod_usertrack.so
#LoadModule vhost_alias_module modules/mod_vhost_alias.so
LoadModule ssl_module modules/mod_ssl.so

ServerName ohetestisg1
ServerAdmin root@ohetestisg1
DirectoryIndex index.html
DefaultType text/plain
ErrorLog logs/error.log
LogLevel debug
LogFormat "%{Referer}i -> %U" referer
LogFormat "%{User-agent}i" agent
LogFormat "%h %l %u %t \"%r\" %>s %b %D" common_isg
#LogFormat "%h %l %u %t %U %>s %b %D" common_isg
LogFormat "%h %l %u %t \"%r\" %>s %b %D \"%{Referer}i\" \"%{User-Agent}i\"" combined
CustomLog logs/access.log common_isg
AddDefaultCharset ISO-8859-1
LanguagePriority en da nl et fr de el it ja kr no pl pt pt-br ltz ca es sv tw
# DocumentRoot ""
UseCanonicalName on
TypesConfig conf/mime.types
HostnameLookups Off
ServerSignature off
ExtendedStatus on
<Directory "/">
  AllowOverride None
  Options FollowSymLinks
</Directory>
SSLRandomSeed startup builtin
SSLSessionCache dbm:logs/ssl_scache
SSLSessionCacheTimeout 30
SSLMutex default

<VirtualHost *:80>
servername ohetestisg1

<Location /server-status>
    SetHandler server-status
    Order deny,allow
    Allow from all
</Location>

<Location /server-info>
    SetHandler server-info
    Order deny,allow
    Allow from all
</Location>
</virtualhost>

<VirtualHost *:80>
  ServerName vmediassl
  SSLProxyEngine On

  SSLProxyMachineCertificateFile "C:\stunnel\ohetestisg1.pem"
  SSLProxyCACertificateFile "C:\stunnel\css-ca-cert.pem"
  SSLProxyVerify require
  SSLProxyVerifyDepth 1

  CustomLog logs/vmediassl_access.log common_isg
  ErrorLog logs/vmediassl_error.log
  RewriteLog logs/vmediassl_rewrite.log
  RewriteLogLevel 1
  RewriteEngine on
 RewriteRule ^/(.*) https://10.162.130.233:444/$1 [P]
</VirtualHost>

<VirtualHost *:80>
  ServerName vaccessssl
  ServerAlias vproxy
  ServerAlias vclientssl
  SSLProxyEngine On

  SSLProxyMachineCertificateFile "C:\stunnel\ohetestisg1.pem"
  SSLProxyCACertificateFile "C:\stunnel\css-ca-cert.pem"
  SSLProxyVerify require
  SSLProxyVerifyDepth 1
 
  CustomLog logs/vaccessssl_access.log common_isg
  ErrorLog logs/vaccessssl_error.log
  RewriteLog logs/vaccessssl_rewrite.log
  RewriteLogLevel 1
  RewriteEngine on
  RewriteRule ^/(.*) https://10.162.130.253/$1 [P]
</VirtualHost>

<VirtualHost *:80>
  ServerName voheosdmssl
  SSLProxyEngine On

  SSLProxyMachineCertificateFile "C:\stunnel\ohetestisg1.pem"
  SSLProxyCACertificateFile "C:\stunnel\css-ca-cert.pem"
  SSLProxyVerify require
  SSLProxyVerifyDepth 1
  
  CustomLog logs/voheosdmssl_access.log common_isg
  ErrorLog logs/voheosdmssl_error.log
  RewriteLog logs/voheosdmssl_rewrite.log
  RewriteLogLevel 1
  RewriteEngine on
  RewriteRule ^/(.*) https://10.162.130.234:447/$1 [P]
</VirtualHost>

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


Mime
View raw message